Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa
File:                     ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa (raw, json)
Hash identifier:          CDrdetH6jyad8v9/Qfl5pZeTZIfkxDRP6u7dnbNsMpY=
Subject key identifier:   6D:57:E7:D3:2B:6C:3E:49:5F:BE:67:E4:4D:E0:8B:3D:2C:D5:66:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF773D19AB177FE7047A480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33652
IP address blocks:        2001:559:2c4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:73:d1:9a:b1:77:fe:70:47:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5fca716c-5904-4bf9-85f3-5880077b1448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:0f:39:a2:c3:c7:20:32:33:6f:4c:b4:2a:
                    ae:be:8d:cf:36:eb:31:49:92:58:62:dd:24:b1:b8:
                    ea:26:81:29:0f:73:6b:94:9a:e5:f6:8e:83:52:35:
                    7a:d3:49:b9:fb:da:f9:3f:54:92:6d:07:fd:94:a2:
                    63:42:a4:9d:ee:a2:c6:72:a4:15:cd:02:b1:27:88:
                    29:14:af:72:83:94:89:9a:3d:28:e2:e1:c9:5b:ff:
                    d6:df:e1:56:b3:a1:02:e6:2c:bb:9b:b5:3c:98:fb:
                    ad:03:df:73:23:26:95:10:1e:51:3b:8a:22:63:d0:
                    e2:57:de:d7:79:db:63:50:fd:59:db:06:32:30:62:
                    d7:a4:6c:5f:11:1d:43:fd:08:df:9c:0a:df:4d:f2:
                    bc:cc:cd:73:cf:eb:0b:68:62:e2:5f:a2:05:ff:07:
                    c0:a8:bb:fa:1c:ea:72:4c:da:5e:84:89:3a:2a:ec:
                    b0:2c:61:8f:59:62:a8:ec:ef:a3:aa:4d:c5:d2:25:
                    5f:04:b7:4d:5d:3a:5b:8b:12:df:b2:d4:ab:73:65:
                    ee:39:11:5d:10:55:8c:8b:85:2a:ee:9e:a0:86:ae:
                    05:f3:6e:9e:79:e0:24:a4:88:fb:d6:be:14:73:3d:
                    38:eb:96:b5:38:51:b6:fc:0e:75:26:24:e8:67:7d:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:57:E7:D3:2B:6C:3E:49:5F:BE:67:E4:4D:E0:8B:3D:2C:D5:66:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab0c340f-af18-3f25-b0d3-8ab6d7978878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2c4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c3:6c:08:e9:ed:ae:0b:88:ae:f0:08:8f:75:61:06:f5:a9:
         48:45:14:c8:81:14:19:b8:f1:bb:c7:6a:4f:f2:ee:16:70:c2:
         a6:a6:02:ea:ff:61:ff:4a:13:d1:cb:5a:3b:d1:5b:94:c9:74:
         9b:26:85:06:57:6b:66:84:75:1c:b1:48:a4:f1:f1:fb:13:b9:
         e5:d9:a6:59:ba:27:c6:47:b9:fe:61:a6:e2:b8:63:80:5b:15:
         7f:53:47:cc:04:8c:4f:b8:a2:00:de:4f:5a:31:37:a8:ad:af:
         53:c4:ef:a1:05:1a:9c:0c:2e:1b:46:04:76:c4:6c:02:9f:af:
         05:58:80:f1:f7:87:76:7c:0c:48:b7:bc:26:fb:2b:8c:c7:8a:
         05:b0:b3:7e:08:0a:4a:7d:51:c6:5f:03:3a:20:82:3c:51:70:
         e1:cd:29:bf:61:95:1d:7a:3f:79:41:a5:f9:ad:e3:79:ef:07:
         95:cc:2e:8b:ee:c4:36:f9:13:17:fa:ab:9e:87:8f:1a:1a:54:
         49:bd:a6:c4:61:1d:09:f4:18:14:bb:f3:5f:fa:04:4b:9c:56:
         a2:dd:ee:77:fe:6a:ab:35:d9:ce:e0:84:fe:46:66:37:76:7a:
         9d:44:7c:68:7c:d8:88:65:35:d1:d8:3a:95:3d:0f:8b:b2:ed:
         aa:33:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:09:54 2024 by rpki-client on console-ams.rpki-client.org